chore: scrub instance details and personal data from committed artefacts

Blood-pressure fixtures in the in-target integration suite were copied
from live readings; they are now synthetic with the same in/out split so
every assertion holds. Hard-coded operator hostnames move behind env vars
(DEPLOY_LOGS_URL, HEALTHLOG_PROD_URL), the codex client identifies via
the public repository URL, the OpenAPI servers entry points at a neutral
example host, and remaining workflow, docs and comment references to the
operator's instance or working notes are generalised. The compose
whitelist also gains DEPLOY_WEBHOOK_SECRET, which was missing and made
the deploy webhook unusable on compose installs.

src/app/api/internal/deploy-webhook/route.ts

@@ -9,7 +9,7 @@ import { dispatchLocalisedNotification } from "@/lib/notifications/dispatch-loca
 import { prisma } from "@/lib/db";
 
 /**
- * Deploy-status webhook (phase C2 / v1.4.15).
+ * Deploy-status webhook (v1.4.15).
  *
  * Coolify (Settings → Notifications → Webhook) calls this endpoint after
  * every deploy attempt. We verify the request via a shared secret in the
@@ -135,7 +135,10 @@ async function notifyAdminsOfFailure(event: NormalizedEvent): Promise<void> {
         application: event.applicationName,
         error: event.error ?? "",
         deployment: event.deploymentUuid ?? "",
-        logsUrl: "https://apps-01.bombeck.io",
+        // Optional: operators can point this at their deployment
+        // dashboard (e.g. the Coolify UI). Falls back to an empty
+        // string so the body template still composes cleanly.
+        logsUrl: process.env.DEPLOY_LOGS_URL ?? "",
       },
       metadata: {
         source: "deploy-webhook",